ldgrr-live-us[.]pages[.]dev

PhishDestroy identifies ldgrr-live-us.pages.dev as a live lead-generation phishing scam currently under active redirection. The domain was registered through Cloudflare, Inc. and resolves to IP 188.114.97.3, using a Google Trust Services SSL certificate to enhance credibility. Despite zero detections on VirusTotal (1/95) and absence from major blocklists, the domain exhibits classic phishing patterns including rapid propagation and certificate trust exploitation, warranting immediate investigation and remediation to prevent credential harvesting.

This domain exhibits multiple red flags aligning with a sophisticated lead-gen phishing campaign. VirusTotal shows absolutely no detections (1 out of 95 engines) as of latest ingestion, indicating a fresh or highly evasive operation. The domain is registered via Cloudflare, Inc., leveraging the provider’s reputation to obscure malicious infrastructure, and resolves to IP 188.114.97.3 which has been associated with limited low-reputation activity. The SSL certificate issued by Google Trust Services provides a veneer of legitimacy, often used to deceive users into believing the domain is secure. As of now, no reputable blocklists have flagged this domain, and no historical telemetry exists to determine its age or prior use.

Given the zero-detection status and active propagation, organizations should treat this as a high-priority incident. It is strongly recommended to block ldgrr-live-us.pages.dev at DNS and firewall levels, and to inspect any inbound emails or web sessions involving this domain. Users who may have interacted with the site should reset credentials immediately, enable MFA where applicable, and report the incident through official channels. Continuous monitoring of the associated IP range and SSL certificate serials is advised. This domain represents a clear risk for corporate espionage and identity theft through fraudulent lead-collection forms. Immediate containment is advised to prevent lateral compromise.